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Notations and standard results are presented in Appendix [Al 
We consider the following rule in -calculus: 

assoc (x.M) ((y.N) P) — ► (y.(x.M) N) P) 
We want to prove 
Proposition 1 SN C SN assocP . 
Lemma 1 — > 3S soc is terminating in -calculus. 

Proof: Each application of the rule decreases by one the number of pairs of that 
are not nested. □ 

To prove Proposition Q] above, it would thus be sufficient to prove that — >assoc 
could be adjourned with respect to — >p , in other words that — > a ssoc 1 — *p £ 
— >p ■ — ^assoc/3 (t ne adjournment technique leads directly to the desired strong 
normalisation result). When trying to prove the property by induction and case 
analysis on the /^-reduction following the assoc-reduction to be adjourned, all cases 
allow the adjournment but one, namely: 

(x.M) ((y.N) P) -^ assoc (y.(x.M) N) P — ^ (y. {%} M) P 

Hence, we shall assume without loss of generality that the /3-reduction is not of 
the above kind. For that we need to identify a sub-relation of /3-reduction such 
that 

• — >assoc can now be adjourned with respect to 

• we can justify that there is no loss of generality. 

For this we give ourselves the possibility of marking -redexes and forbid reductions 
under their (marked) bindings, so that, if in the assoc-reduction above we make 
sure that (y.(x.M) N) P) is marked, the problematic /3-reduction is forbidden. 

Hence we use the usual notation for a marked redex (y.Q) P, but we can also 
see it as the construct let y = P in Q of c |Mog88| and other works on call- by- value 



-calculus. We start with a reminder about marked redexes. 



Definition 1 The syntax of the -calculus is extended as follows: 
M, N ::= x | x.M \ M N \ (Xx.M) N 



Reduction is given by the following system (312: 

(31 (x.M) N — > { M / X }N 
(32 (Xx.M) N — ► { M / X ~)N 

The forgetful projection onto -calculus is straightforward: 

<f)(x) := x 

4>{x.M) := x4(M) 

(j)(M N) := 4>{M) <f>(N) 

4>((Xx.M) N) := (x.(j)(M)) <f)(N) 

Remark 2 Clearly, — >pi 2 strongly simulates — >p through _1 and — >p 
strongly simulates — >/3i2 through (j>. 

Reducing under A and erasing A can be strongly adjourned 

In this section we identify the reduction notion (C — > / 3 12 ) and we argue against 
the loss of generality by proving that — >/3i2 • C • ( — > /312 U ^) + , a strong 
case of adjournment, presented in Appendix [Bj whose direct corollary is that, for 
every sequence of /312-reduction, there is also a sequence of ^-reduction of the 
same length and starting from the same term. 

We thus split the reduction system (312 into two cases depending on whether or 
not a reduction throws away an argument that contains some markings: 

Definition 2 

if x g FV(M) and there is a term (Xx.N) QCP 
if x £ FV(M) and there is a term (Xx.N) Q CP 
if x S FV(M) or there is no term (Xx.N) Q CP 
if x S FV(M) or there is no term (Xx.N) Q C P 

Remark 3 Clearly, — ^12 = — >fj K U — . 

No we distinguish whether or not a reduction occurs underneath a marked redex, 
via the following rule and the following notion of contextual closure: 

Definition 3 

(Xx.M) P — > (Xx.N) P if M — vpn N 

Now we define a weak notion of contextual closure for a rewriting system i: 
i : M — ► N M -S N M -s N M N 

M ^ TV x.M x.N M P N P P M -s P N 

M -s N 
(Xx.P) M -s (Xx.P) N 

Finally we use the following abbreviations: 
Definition 4 Let ^->:= —^p* and ~>i:= and ^2-= 
Remark 4 Clearly, — ^12 =c — > U ~*i U ~-»2- 
Lemma 5 if (Xx.N) QCP, i/ien i/iere is P' shc/i i/iai P P' . 
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j (x.M) P — > M 

{ (Xx.M) P — > M 

f (x.Af) P — > M 

1 (Ax.M) P — > M 



Proof: By induction on P 

• The case P — y is vacuous. 

• For P = y.M, we have (Xx.N) Q CM and the induction hypothesis provides 
M <-> M', so y.M y.M'. 

• For P = Mi Mi, we have either (Xx.N) Q C Mi or (Xx.N) Q C M 2 . In 
the former case the induction hypothesis provides Mi M{, so Mi M2 
M{ M2. The latter case is similar. 

• Suppose P = (Xy.M-i) M 2 . If there is a term (Xx'.N') Q' C M 2 , the induction 
hypothesis provides M 2 ^ M' 2 , so (Ay. Mi) M 2 ^ (Ay. Mi) M^. If there is no 
such term (Xx'.N') Q' C M 2 , we have (Ay .Mi) M 2 -->■ {^jMi. 

□ 

Lemma 6 ~>iC <^-» • 

Proof: By induction on the reduction step 

Fo£the base cases (x.M) P — >p K M or (Xx.M) P — >p K M with x £ FV(M) 
and (Xy.N) Q C P, Lemma [5] provides the reduction P <^-> P', so (x.M) P <—> 
(x.M) P' ^1 M and (Xx.M) P ^ (Xx.M) P' ^ M. 

The induction step is straightforward as the same contextual closure is used on 
both sides (namely, the weak one). □ 

Lemma 7 ^ 2 • <—* C ■ — >^ 12 

Proof: By induction on the reduction step <— See appendix [Cj □ 

Corollary 8 — >p\2 can be strongly adjourned with respect to <— 

Proof: Straightforward from the last two theorems, and Remark |4j □ 

assoc-reduction 

We introduce two new rules in the marked -calculus to simulate assoc: 

assoc (Xx.M) (Xy.N) P — ► (Xy.(Xx.M) N) P 
act (x.M) N — > (Xx.M) N 

Remark 9 Clearly, — ^assocact strongly simulates — > a ssoc through 

Notice that with the let = in -notation, assoc and act are simply the rules of c 

assoc let x = (let y = P in N) in M — > let y = P in let x = N in M 
act (x.M) N — ► let x = N in M 



Lemma 10 >=^nr a rt • C 



Proof: By induction on the reduction step <— See appendix [Cj □ 
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Lemma 11 — > ^ssoc act ' — > P 12 can ^ e strongly adjourned with respect to <— ►. 

Proof: We prove that Vfc, — 4soc,act >fii2 • ^ C w >|gsoc iact ^12 by 

induction on k. 

• For k = 0, this is Corollary [8l 

• Suppose it is true for k. By the induction hypthesis we get 

k * 

>assoc,act ' ^assocact ' *fiV2 ' — ''assoc. act ' ^ ' ^assocact ' > pl2 

Then by Lemma [TOl we get 

* . — * 

^assocact ' ^ ' ^assocact ' — < ^~ > ' ^assocact ' ^assocact ' y fi\2 

□ 

Remark 12 Note from Lemma[5]that nf~* C n r* lU ^ 2 C nf~"" 12 C nf - ^'"* *" 12 . 
Theorem 13 Bl\t" C BAT^ 5 ^"' >fl12 

Proof: We apply Theorem [5H1 since nf C nf '«■■<>«■«" * al2 and clearly 

( 'Sssoc.act ^12 ) U ^ = >^oc, act >/312 

□ 

Theorem 14 BN P C BN~^*™°' ' 3 

Proof: Since — ^ strongly simulates through 0, we have (/>~ 1 (BN /3 ) C 
BN"" C BN > ™^.«* — *f 12 . Hence 0(</> _1 (BN /3 )) C 0(BN~ > ^- — ^ 12 ). Since 
is surjective, BN 13 = 4>((f>~ 1 (BN 13 )). Hence BN C 0(BN^^«' — ^ 12 ). Also, 
— Sboc.act ' — >/3i2 strongly simulates — >* ssoc • — >p through cj)' 1 , so 
4>(BN > = i5 ^.«« — '- 312 ) C BN^"«" — >3 . □ 

Theorem 15 SA/' 3 C SN 3S50Cl3 

Proof: First, from Lemma \19\ BN > '"° a C SN >a **° c ' 3 . Then from 

Lemma [TJ — > a ssoc is terminating and hence SN assoc is stable under — >p . Hence 
we can apply Lemma EU to get SN assoc/3 = SN > "' oc * & . From the previous 
theorem we thus have BN' 3 C SN assoc ' 3 . Now, noticing that /3-reduction in -calculus 
is finitely branching, Lemma [TJ gives BH = SN' 3 and thus SN 73 C SN assoc/3 . □ 

References 

[Mog88] E. Moggi. Computational lambda-calculus and monads. Report ECS- 
LFCS-88-66, University of Edinburgh, Edinburgh, Scotland, October 1988. 



4 



A Reminder: Notations, Definitions and Basic Re- 
sults 

Definition 5 (Relations) 

• We denote the composition of relations by • , the identity relation by Id, and 
the inverse of a relation by _1 . 

• If V C A, we write 1Z(D) for {M G B\ 3N G P, NTZM}, or equivalently 
Ujvex>{ M e S l NTZM}. When D is the singleton {M}, we write 1Z(M) for 
fc({M}). 

• We say that a relation 7?. : A — > S is ioia/ if 7£ _1 (,S) = .4. 

Remark 16 Composition is associative, and identity relations are neutral for the 
composition operation. 

Definition 6 (Reduction relation) 

• A reduction relation on A is a relation from A to A. 

• Given a reduction relation — > on .4, we define the set of ^-reducible forms 
(or just reducible forms when the relation is clear) as rf - * := {M G 37V G 
.4, M — > TV}. We define the set of normal forms as nf^ := {M G A\ flN G 
AM^TV}. 

• Given a reduction relation — ► on .4, we write <— for — and we define — 
by induction on the natural number n as follows: 

^°:= Id 

^n+l._ ^ _ > n ( = y n ■ >) 

denotes the transitive closure of — ► (i.e. — >+:= \J n>1 — ►"). 
— »* denotes the transitive and reflexive closure of — > (i.e. — >*:= U„>o ~~ *")■ 
<-> denotes the symmetric closure of — » (i.e. <->:= <— U — »). 
^* denotes the transitive, reflexive and symmetric closure of — >. 

• An equivalence relation on .4 is a transitive, reflexive and symmetric reduction 
relation on A, i.e. a relation — > = <->*, hence denoted more often by <~, =. . . 

• Given a reduction relation — > on .4 and a subset B C A, the closure of B 
under — ► is —►*(/?). 

Definition 7 (Finitely branching relation) A reduction relation — > on A is 
finitely branching if VM G -4, — >(M) is finite. 

Definition 8 (Stability) Given a reduction relation — > on .4, we say that a subset 
T of .4 is —^-stable (or sia&Ze under — >) if — ►(T) C T. 

Definition 9 (Strong simulation) 

Let K be a relation between two sets .4 and B, respectively equipped with the 
reduction relations — *a an d ~^B- 

— >B strongly simulates — *a through 1Z if (JZr 1 ■ —*a) ^= ( — >b ' TZ 1 )- 

Remark 17 

1. If — >g strongly simulates — >,4 through 1Z, and if -^bQ^'b ar *d - >_4, then 
— »g strongly simulates — >' A through 7Z. 
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2. If — »b strongly simulates — ^ and through TZ, then it also strongly sim- 
ulates — >a ■ -^' A through TZ. 

3. Hence, if strongly simulates — >^ through 7\L, then it also strongly simulates 

through TZ. 

Definition 10 (Patriarchal) Given a reduction relation — > on .A, we say that 

• a subset T of A is -^--patriarchal (or just patriarchal when the relation is 
clear) if ViV e A, ->(AT) CT^JVeT. 

• a predicate P on *4 is patriarchal if {M £ -4| P(M)} is patriarchal. 

Definition 11 (Normalising elements) Given a reduction relation — > on .4, the 
set of ^-strongly normalising elements is 

SI\T := p| T 

r is patriarchal 

Definition 12 (Bounded elements) The set of ^-bounded elements is defined 

as 

BN^:= |J BN ^ 

n>0 

where BN^* is defined by induction on the natural number n as follows: 
BIV := nf - * 

BN^ +1 := {M G A\ 3n' < n, — >(M) C BN^} 

Lemma 18 7/ — > is finitely branching, then BN~^ is patriarchal. 
As a consequence, BAP* = SAP*. 

Lemma 19 

1. Ifn<n' then BN^ C BN^, C BATP In particular, nf* C BAC C BAT". 
5. BAT C SAT. 

Lemma 20 

1. SN^ is patriarchal. 

2. IfM G BAT iften -> (M) C BAT. 
J/M G SAT tfien (M) C SAT. 

Theorem 21 (Induction principle) Given a predicate P on A, 
suppose VM G SAT, (WV G — >(M), P(N)) P(M). 
Tften VM e SAT,P(M). 

When we use this theorem to prove a statement P(M) for all M in SN^ . we 
just add (\/N G — > (M), P(N)) to the assumptions, which we call the induction 
hypothesis. 

PFe say i/iai we prove the statement by induction in SN^. 
Lemma 22 

1- #->iC->2, *ften nf 1 D nf % SAT 1 3 SAT 2 , 
and for all n, BN^ 1 D BN^ 2 . 
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2. nr = nr + , SI\T = Sl\r + , and for all n, BN^ + = Bh£ . 

Notice that this result enables us to use a stronger induction principle: in order 
to prove VM G SN^, P(M), it now suffices to prove 

VM e SI\T , (VJV G -»+(M), P(M) 

This induction principle is called the transitive induction in SN^ . 

Theorem 23 (Strong normalisation by strong simulation) Let 1Z be a rela- 
tion between A and B, equipped with the reduction relations —>a and —>b- 
If —*B strongly simulates —>a through 1Z, then IZ^ 1 (SI\T^ B ) C SI\T^ A . 

Lemma 24 Given two reduction relations — >i, — >2, suppose that SN^ 1 is stable 
under -> 2 . Then SAT lU ^ 2 = SAT*'^ 2 n SAT 1 . 

B Strong adjournment 

Definition 13 Suppose —*a ls a reduction relation on A, — >g is a reduction relation 
on 6, 7?. is a relation from *4 to B. 

—>B simulates the reduction lengths of — m through 1Z if 

Vfc, VM, NeA,VPeB, M N A MftP 3Q G B, P Q 

Lemma 25 Suppose — is a reduction relation on A, —>b is a reduction relation 
on B, 1Z is a relation from A to B. 

If —>B strongly simulates — >a through 1Z, then — »g simulates the reduction 
lengths of —>a through 1Z. 

Proof: We prove by induction on k that Vfc,VM,7V G A 2 , VP G S, M 
NAMKP => 3Q,P^|Q. 

• For fc — 0: take Q := M = N. 

• Suppose it is true for k and take M — >a M' — >^ N . The strong simulation 
gives P' such that P — »g P' and M'TZP' . The induction hypothesis gives Q' 
such that P' -> B Q'. Then it suffices to take the prefix P Q (of length 
fc+1) of P^+ P' -f| Q'. 

□ 

Lemma 26 Vn, VM, (Vfc, VN, M -> k N ^k<n) Me fiA£* 

Proof: By transitive induction on n. 

• For n — 0: clearly both sides are equivalent to M e nf - *. 

• Suppose it is true for all i < n. 

Suppose Vfc,WV, M -^ k N => k < n + 1. Then take M -> M' and assume 
M' — > fc N'. We have M — > fc +1 A/ 7 so from the hypothesis we derive k' + 
1 < n + 1, i.e. fc' < n. We apply the induction hypothesis on M' and get 
M' G BN^. By definition of BN^ we get M G BN r 7 +1 . 

Conversely, suppose M G BINI^!^ and M -^ k N . We must prove that fc < n+1. 
If fc = we are done. If fc = fc' + 1 we have M — > M' -^> k N; by definition of 
BN^j there is i < n such that M' G BN^, and by induction hypothesis we 
have fc' < i; hence k — k 1 + 1 < i + 1 < n + 1. 

□ 
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Theorem 27 Suppose — >a is a reduction relation on A, — >g is a reduction relation 
on B, 1Z is a relation from A to B. 

If —*B simulates the reduction lengths of — ^ through 1Z, then 

yn i n- 1 {BN^ e )<^BN^ A (C StT A ) 

Proof: Suppose N G BN^ e and MKN. If M ->\ M' then by simulation 
N — »g N' so by Lemma [26] we have k < n. Hence by (the other direction of) 
Lemma [26] we have M G BN^- 4 . □ 



Definition 14 Let — >i and — > 2 be two reduction relations on A. 
The relation — »i can be strongly adjourned with respect to — »2 if 
whenever M — >i TV ^ 2 P there exists Q such that M -> 2 Q(— >i U ^ 2 ) + P. 

Theorem 28 Lei — >i and — > 2 &e iwo reduction relations on A. If nf^ 2 C n/^ 1 
and — >i can foe strongly adjourned with respect to — > 2 iften BN~^ 2 C BAT^ lU ^ 2 . 

Proof: Prom Theorem [27] it suffices to show that — > 2 simulates the reduction 
lengths of — »i U — » 2 through the identity. We show by induction on k that 

Vfc,VM,iV, M(->i U -> 2 ) k N => 3Q,M^Q 

• For k = 0: take Q := M 

• For fc = 1: If M -> 2 N take Q := TV; if M ->i TV use the hypothesis 
nf^ 2 C nf^ 1 to produce Q such that M — > 2 Q- 

• Suppose it is true for fc + 1 and take M(->i U -» 2 )P(->i U -^ 2 ) fc+1 iV. 

The induction hypothesis provides T such that P —>2 +1 ^\ m other words 
P — » 2 S — >2 T. 

If M — > 2 P we are done. If M — >i P we use the hypothesis of adjournment 
to transform M ->i P -> 2 S into M ^ 2 P'(-»i U -^) + S. Take the prefix 
P'Hi U -^ 2 ) fc+1 P (of length k + 1) of P'Hi U ->- 2 ) + S T, and apply 
on this prefix the induction hypothesis to get P' —> 2 +1 P. We thus get 

M ^ 2 +2 



C Proofs 

Lemma [7] ^> 2 • C <^-> • — >7j 12 

Proof: By induction on the reduction step <— 

• For the base case where the /37«-reduction is a /32-reduction, we have 
M (Xx.N) P <^> {/ / x}N with x G FV(iV) or P has no marked redex 
as a subterm. We do a case analysis on the reduction step M -^> 2 (Xx.N) P. 

If M = (Xx.N') P ^2 (Xx.N) P because AT' — > pi2 N then (Xx.N) P ^ 
Nna {%}N. 

If M = (Xx.N) P' ^ 2 (Xx.N) P because P' -P, then it means that 
P has a marked redex as a subterm, so we must have x G FV(iV). Hence 

(Xx.N) P' £ u {%}^- 
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• For the base case where the /?K-reduction is a /31-reduction, we have 
M {x.N) P {%}N with x G FV(Af) or P has no marked redex 
as a subterm. We do a case analysis on the reduction step M {x.N) P. 

If M = M' P ^ 2 (x.N) P because M' x.N then W must be of the form 
x.M" with M" N. Then (x.M") P ^ {%} M" (in case P has a marked 
subterm, notice that x £ FV(iV) C FV(M")), and {%}M" — ^i 2 {%}A^. 

If M = (x.N) P' fa-AT) -P because P' -P, then it means that P 
has a marked redex as a subterm, so we must have x £ FV(AT). Hence 
(x.N) P'^{i%}iV^+ 2 {%}iV. 

• The closure under A is straightforward. 

• For the closure under application, left-hand side, we have M ^ 2 N P <—* N' P 
with N N'. We do a case analysis on the reduction step M ~> 2 N P. 

If M = M' P N P with M' ~~> 2 N, the induction hypothesis gives 
M'^> >p 12 N' and the weak contextual closure gives M' P^ >^ 12 N' P. 

IfM = NP'^> 2 NP with P' ~> 2 P, we can also derive N P' ^ N' P' — >p 12 
N' P. 

• For the closure under application, right-hand side, we have M ^2 N P > 
N P' with P <^-> P'. We do a case analysis on the reduction step M ^2 N P. 

If M = M' P ^2 N P with M' ^ 2 N, we can also derive M' P ^ 
M' P> —^ P12 N P'. 

If M = N M' "~> 2 N P with M' ^ 2 P, the induction hypothesis gives 
M'^-> >^ 12 P' and the weak contextual closure gives N M'<-> >^ 12 N P' . 



• For the closure under marked redex we have M ^ 2 (Xx.P) N <^-» (Xx.P) N' 
with N N' . We do a case analysis on the reduction step M ^ 2 (Xx.P) N. 

If M = (Xx.P') N ^2 (Xx.P) N because P' — >ai2 P, we can also derive 
(Xx.P') N ^ (Xx.P') N' — > fjl 2 (Xx.P) N'. 

If M = (Xx.P) M' ^2 (Xx.P) N with W ^2 N, the induction hypothesis 
gives M' <^-> Q — ^12 N' and the weak contextual closure gives (Xx.P) M' <— > 
(Ax.P) Q — >^ 12 (Ax.P) AT'. 

□ 

Lemma [TO] >lssocact • ^ C ^ >|ssocact 

Proof: By induction on the reduction step <— 

• For the first base case, we have M — >issocact (x.N) P > {^jA^ with a; G 
FV(A r ) or P has no marked subterm. Since root assocact-reduction produces 
neither -abstractions nor applications at the root, note that M has to be of the 
form (x.N') P' , with either N' ^assoc act N (and P' = P) or P' ^assoc act P 
(and AT' = N). In both cases, x £ FV(A") C FV(A r ') or P' has no marked 

subterm, so we also have (x.N 1 ) P' | J % ; j-iV' — >^^ aa {%}N. 

• For the second base case, we have M — >assocact (Xx.N) P |%}A r 
with x £ FV(N) or P has no marked subterm. We do a case analysis on 

M — ^assocact (Xx.N) P. 

KM = (Ax'.Afi) (Aa?.Af 2 ) P >assoc _(Aa;.(Aa;'.Mi)_M 2 ) P with AT = 
(Ax'.Mx) M 2 , wealsohave M = (Xx'.Mx) (Xx.M 2 ) P ^ (Xx'.Mi) {%}M 2 = 
{%}N. 
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If M = (x.N) P — > act (Xx.N) P then M^{%}N. 

If M = (Xx.N') P' — ^assocact (Xx.N) P with either N' — >assocact N (and 
P' = P) or P' — ^assocact P (and N' = N), we have, in both cases, x G 
FV(iV) C FV(N') or P' has no marked subterm, so we also have (x.N') P' 

{^j^'^a^act 

• The closure under is straightforward. 

• For the closure under application, left-hand side, we have Q — Assocact 

M N ^ 

M' N with M ^ M'. We do a case analysis on Q — >aisocact M N. 
If Q = M" N - 

~~* assocact M N with M" > assocact M, the induction 
hypothesis provides M"^ ■ -^^ct M' so M" N^ ■ -^^- cact M> N. 

If Q = M N' — 

^assocact M N with N' — > assocact N , we also have M N' 

M' N' ^assocact M> N. 

• For the closure under application, right-hand side, we have Q — >assocact 
M N <—> M N' with N ^ N' . We do a case analysis on Q — >aisocact M N. 

\{Q = M' N — ^assocact M N with M' — ^assocact M, we also have M' N 

M' N' ^assocact M N' . 

If Q = M N" — ^assocact M N with N" — >assocact N, the induction hypoth- 
esis provides N"^ ■ -^^ a ct N' so M N"^ ■ -^cact M N'. 

• For the closure under marked redex, the ^-reduction can only come from the 
right-hand side because of the weak contextual closure (<^-> does not reduce 
under A), so we have Q — ^assocact (Aj/JW") P ^ (Aj/.M) P' with P P'. 
We do a case analysis on Q — ^assocact (Ay.M) P. 

If Q = (Xx.M') (Ay. iV) P _ > a ssoc (Ay.(Aa;.M') NJ P with M = (Xx.M')N, 

we also have Q = (Az.M') (Xy.N) P ^ {Xx.M') (Xy.N) P' — >^soc (Ay.(Ax.M') N) P'. 

If Q = (y.M) P — ^a« (Ay.M) P, then we also have Q = (y.M) P ^ 
(y.M) P' — act (Ay.M) P' . 

□ 
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